Change public share access to read only for public and full access to selected users

Hi, new to the community just purchased a recertified WDMyCloud 2TB after my 2 years old MyBookLive 2TB HD died due to accidental power cable unplugging. I’ve got everything setup including MiniDLNA by following instructions on this forum and everything is working  exactly as I want it to except public share.

I want public share to be set to read only access for public and full access to certain users (just myself at the moment) and having a “upload” folder within this share with full public access to everything in this folder would be a bonus. I tried login in to ftp with root user and removing write permission for public but that blocks me out as well. I’m sure it’s possible by doing some majic on SSH but I wouldn’t have a clue so hoping someone here would be able to help me out.

There appears to be a bug in the Dashboard that you can exploit to turn off public access to Public, and enable individual user controls. See the end of this thread:

http://community.wd.com/t5/WD-My-Cloud/Guest-User-security-concerns-on-My-Cloud-2TB-Personal-Cloud/m-p/881649

This isn’t what I was looking for. I want to keep the public share and all DLNA funcions on it. I just want to set permission to read only access to public so they can’t write, edit or delete content on the share and can read / execute.

Read the thread again; it is exactly what you asked to do. It will allow you to set permissions on the Public share. Those permissions could be ‘full access’ for you, or ‘read only’ for other users. It does not delete the Public share, or stop DLNA access to it.

If you want to allow people to access media via DLNA, but not be able to modify it, put the media in a private share, and enable media serving on the share. DLNA ignores access controls when sharing media, so anyone can get read access to media via DLNA, even if they have no access to the media via a file server.

What i want is public to have read only access to file server. Public as in users who do not have a user account on mycloud. E.g someone who connects to to my home network for the first time and is able to browse and download content from public share. I’m aware of being able to set indivual access to shares for users like full access, read only and no access but public users won’t have a user account.

Right, I understand now.

For DLNA access only, putting media in a private share will work.

For general file server access, I can’t think of a way of making the Public share read-only access to non-users. Sorry.

Mr_Khan wrote:

What i want is public to have read only access to file server. Public as in users who do not have a user account on mycloud. E.g someone who connects to to my home network for the first time and is able to browse and download content from public share. I’m aware of being able to set indivual access to shares for users like full access, read only and no access but public users won’t have a user account.

Through the My Cloud UI interface what you seek to do is not possible. The public share like all other share folders are an all or nothing affair when using the adminstration UI. When using the administration UI you do not have granular control on shared folders to limit non users to read only access or set permission levels for subfolders.

The workaround to do what you seek and have the public folder set for read only is to change the folder settings via SSH. It may take some work to set the folder security so that users can read/write to the public folder while the guests only have read access. However, if you reboot the WD My Cloud or update the WD My Cloud firmware those settings may be reset back to the default settings where the entire public folder is read/write for all. There are way to prevent this but again it will take a bit of coding to do so via SSH. See  this link (even though its for the WD My Book Live) for a starting point on how to use SSH to change the permission levels on the public folder.

Another option if one doesn’t go the SSH route is to turn off public sharing for the public folder then create a “guest” user account and give that “guest” account read only access to the public folder while all other user accounts have full read/write access.

2 Likes

Thanks that’s exactly what I wanted :smiley:

I thought creating an account was ‘cheating’,

I just tried to create a ‘guest’ account, but got an error 200400 ‘a bad request was made’. It did create the ‘guest’ share, though, just not the user.

I made a user ‘guests’ without problem, though.

I suspect there’s already a ‘guest’ user account on the device as supplied, that doesn’t appear in the user list.